ed781211e24bcfe6f364667c76506dcac8df30139cfd7c94d9c573217e8f5125 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ed781211e24bcfe6f364667c76506dcac8df30139cfd7c94d9c573217e8f5125
Size

252KB
MD5

0cb6d200555b859e9549e90a3c952ebc
SHA1

ac002198592e175da590445cf0648b56b8131d8f
SHA256

ed781211e24bcfe6f364667c76506dcac8df30139cfd7c94d9c573217e8f5125
SHA512

36ee26904a8c58c44bdcaa3235cc17ae0d22c5bbbdcc7492035cdcc043c4703741580c863866e6a0319a36d394bc6db161615f55830d0cd2bcb083e46bb4a987
SSDEEP

3072:cIdcFLEdskgrt05bnwhVh6PTPnKusanmTLusEZTB4lWRGv8exII+eKmf8Dh+W/ju:ZWjZ0xCVh6Mauu3ZTGWRuN+WWq

Score

N/A

Malware Config

Signatures

Files

ed781211e24bcfe6f364667c76506dcac8df30139cfd7c94d9c573217e8f5125
.exe windows x86

fc39d6bcccc6aed12cc7b3f6f5003c3e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord516
ord632
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord608
ProcCallEngine
ord644
ord100
ord617
ord581

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

atdkyyo
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE